Chapter 7. Configuring Single Sign-On for logging in to the RHEL web console service running on an IdM client and an IdM server

Procedure

1. Log in to the RHEL 9 web console.

   For details, see Logging in to the web console.

2. In the Configuration field of the Overview tab click Join Domain.
3. In the Join a Domain dialog box, enter the host name of the IdM server in the Domain Address field.
4. In the Domain administrator name field, enter the user name of the IdM administration account.
5. In the Domain administrator password, add a password.
6. Click Join.

Verification

1. If the RHEL 9 web console did not display an error, the system has been joined to the IdM domain and you can see the domain name in the System screen.

2. To verify that the user is a member of the domain, click the Terminal page and type the id command:

   Copy to Clipboard Toggle word wrap

   $ id
   euid=548800004(example_user) gid=548800004(example_user) groups=548800004(example_user) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

Procedure

1. Obtain your Kerberos ticket-granting ticket:

   Copy to Clipboard Toggle word wrap

   $ kinit idmuser@IDM.EXAMPLE.COM
   Password for idmuser@IDM.EXAMPLE.COM:

2. Enter the fully qualified name of the host on which the web console service is running into your browser:

   Copy to Clipboard Toggle word wrap

    https://<dns_name>:9090

   

   At this point, you are successfully connected to the RHEL web console and you can start with configuration. For example, you can join a RHEL 9 system to the IdM domain in the web console.

Procedure

1. Create a symlink:

   Copy to Clipboard Toggle word wrap

   # ln -s /var/lib/ipa/gssproxy/http.keytab /etc/cockpit/krb5.keytab

2. Set a certificate file Bash variable:

   Copy to Clipboard Toggle word wrap

   # CERT_FILE=/etc/cockpit/ws-certs.d/50-certmonger.crt

3. Set a certificate key Bash variable:

   Copy to Clipboard Toggle word wrap

   # KEY_FILE=/etc/cockpit/ws-certs.d/50-certmonger.key

4. Generate a certificate-key pair:

   Copy to Clipboard Toggle word wrap

   # ipa-getcert request -f ${CERT_FILE} -k ${KEY_FILE} -D $(hostname --fqdn)